openstack/ansible-role-pki
Code Issues Proposed changes

Create relative links to root instead of absolute

Browse Source 
We don't really need to create an absolute links for root/intermediate
certificates since original file is placed at the same place. In case
of storing PKI dir in git these links are considered as  out-of-bound
which results in sanity checks failure.
Also we're eliminating risk of broken links in case when PKI directory
is being moved on the filesystem

Change-Id: Ia7f4f4726bf4d73c6c0071bef52fd6eb58d662a3
This commit is contained in:
Dmitriy Rabotyagov 2023-01-13 13:58:30 +01:00
parent 7b261e2119
commit 36ee8b2dc0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/standalone/create_ca.yml
View File

@ -131,7 +131,7 @@
- name: Symlink the certificate name to the most recently generated - name: Symlink the certificate name to the most recently generated
file: file:
src: "{{ ca_selfsigned_crt.filename | default(ca_ownca_crt.filename) }}" src: "{{ (ca_selfsigned_crt.filename | default(ca_ownca_crt.filename)) | basename }}"
dest: "{{ ca_cert_prefix ~ '.crt' }}" dest: "{{ ca_cert_prefix ~ '.crt' }}"
state: link state: link
when: ca_ownca_crt is changed or ca_selfsigned_crt is changed when: ca_ownca_crt is changed or ca_selfsigned_crt is changed